The Global Intelligence Files,
files released so far...
2701
The Global Intelligence Files

### Index pages

List of Releases

### by Date of Document

unspecified
2001
2004
2005
2006
2007
2008
2009
2010
2011

### by Date of Release

2001-03-13
2010-03-10
2011-03-05
2011-03-15
2012-01-29
2012-02-27
2012-02-28
2012-02-29
2012-03-01
2012-03-02
2012-03-03
2012-03-04
2012-03-05
2012-03-06
2012-03-07
2012-03-08
2012-03-09
2012-03-10
2012-03-11
2012-03-12
2012-03-13
2012-03-14
2012-03-15
2012-03-16
2012-03-17
2012-03-19
2012-03-20
2012-03-23
2012-03-25
2012-03-26
2012-03-27
2012-04-01
2012-04-02
2012-04-24
2012-04-26
2012-04-30
2012-05-10
2012-06-18
2012-06-20
2012-07-01
2012-07-24
2012-07-28
2012-07-29
2012-07-30
2012-07-31
2012-08-01
2012-08-02
2012-08-05
2012-08-06
2012-08-07
2012-08-08
2012-08-09
2012-08-10
2012-08-11
2012-08-12
2012-08-13
2012-08-14
2012-08-15
2012-08-16
2012-08-17
2012-08-18
2012-08-19
2012-08-20
2012-08-21
2012-08-22
2012-08-23
2012-08-24
2012-08-25
2012-08-26
2012-08-27
2012-08-29
2012-08-30
2012-08-31
2012-09-01
2012-09-02
2012-09-03
2012-09-04
2012-09-05
2012-09-06
2012-09-07
2012-09-09
2012-09-10
2012-09-11
2012-09-12
2012-09-13
2012-09-14
2012-09-16
2012-09-17
2012-09-18
2012-09-19

### Our Partners

ABC Color - Paraguay
Al Akhbar - Lebanon
Al Masry Al Youm - Egypt
Asia Sentinel - Hong Kong
Bivol - Bulgaria
Carta Capital - Brazil
CIPER - Chile
Dawn Media - Pakistan
L'Espresso - Italy
La Repubblica - Italy
La Jornada - Mexico
La Nacion - Costa Rica
Malaysia Today - Malaysia
McClatchy - United States
Nawaat - Tunisia
NDR/ARD - Germany
Owni - France
Pagina 12 - Argentina
Philip Dorling - Fairfax media contributor - Australia
Plaza Publica - Guatemala
Publica - Brazil
Publico.es - Spain
Rolling Stone - United States
Russian Reporter - Russia
Ta Nea - Greece
Taraf - Turkey
The Hindu - India
The Yes Men - Bhopal Activists
Sunday Star-Times - New Zealand

### Community resources

Supporters Support Wikileaks Follow us on Twitter Twitter this Follow us on Facebook

courage is contagious

# The Global Intelligence Files

On Monday February 27th, 2012, WikiLeaks began publishing The Global Intelligence Files, over five million e-mails from the Texas headquartered "global intelligence" company Stratfor. The e-mails date between July 2004 and late December 2011. They reveal the inner workings of a company that fronts as an intelligence publisher, but provides confidential intelligence services to large corporations, such as Bhopal's Dow Chemical Co., Lockheed Martin, Northrop Grumman, Raytheon and government agencies, including the US Department of Homeland Security, the US Marines and the US Defence Intelligence Agency. The emails show Stratfor's web of informers, pay-off structure, payment laundering techniques and psychological methods.

## US/CT- Wikileaks Cyber Battle: Anatomy of a Hack Attack

Released on 2012-03-06 00:00 GMT

Email-ID | 1654237
Date | 2010-12-10 14:03:46
From | sean.noonan@stratfor.com
To | os@stratfor.com

Wikileaks Cyber Battle: Anatomy of a Hack Attack
How Hackers Used 'Low Orbit Ion Cannon' to Take Down Mastercard, Visa,
Paypal
http://abcnews.go.com/Technology/wikileaks-anonymous-cyber-attacks/story?id=12355960&tqkw=&tqshow=GMA
By DEVIN DWYER
Dec. 10, 2010
"Connect your LOICs to the Hive. Attack will start soon."
With that simple call to action, and dozens like it sent out on Twitter,
Facebook and message boards, a scrappy, decentralized coalition of
computer users is waging an international "cyberwar" against U.S.
companies that have severed ties to the controversial website WikiLeaks.
Over the past few days, the group, known as "Anonymous," has successfully
knocked corporate websites for MasterCard, Visa and Paypal offline. There
are also signs that it was behind attacks on Swedish government websites
and those tied to Sarah Palin and Sen. Joe Lieberman.
But what's most surprising about "Operation Payback," cyber security
experts say, is the simplicity of its approach to wreaking havoc on the
web.
The massive hack attack appears to have been orchestrated by a handful of
organizers with control over a virtual army of tens of thousands of
computers. The networks -- known as botnets -- can inundate their targets
with denial of service attacks, overwhelming a site's server so that
regular customers can't get through.
Security experts reached by ABC News estimated that several thousand
computer users have voluntarily dedicated their machines to the campaign,
downloading attack software, installing it on their computers and
connecting to a central server, called a HiveMind.
Anonymous has posted online step-by-step instructions for download,
telling participants that after installing the software they simply "sit
back and enjoy!"
Then, masterminds of the HiveMind input the IP address of their desired
target, and all the affiliated computers running the special software
begin bombarding the site.
"Remember: current target is api.paypal.com, port 443. We are currently
FIRING!" one of the HiveMind organizers posted under the Twitter handle
AnonOpsNet late Thursday.
The software, a simple Windows application called Low Orbit Ion Cannon, or
LOIC, was developed decades ago to test the ability of a website to handle
traffic. Because it's open source, meaning its code is publicly available,
it is also easily shared and manipulated.
"This program just goes and grabs data on the target website at a high
rate, in effect having no pause in your viewing of a webpage," said
Barrett Lyon, an Internet security expert who created the first denial of
service defense company in 2004 and has analyzed the ongoing cyberwar.
"It's basically just blasting the website using all the resources of the
user."
But the attacks don't appear to be meant to do more than create a show,
Lyon said, noting the hackers don't seem to be seeking confidential
company or consumer information, like credit card account numbers.
In their manifesto posted online Thursday, Anonymous says it does not
intend to attack the "critical infrastructure" of sites like Visa and
MasterCard, but instead to disrupt their corporate websites. "Anonymous
does not seek to disturb the public peace nor the average internet
citizen; for average internet citizens are most of us who are Anonymous",
the statement says.
Only 1,000 Computers to Take Down Visa
An Australian man who claims to be one of the organizers running the
HiveMind told the Sydney Morning Herald it took only 800 computers to take
down MasterCard, and 1,000 to take down Visa.
But some security experts say the effort is almost certainly aided by
collections of tens of thousands of other computers, involuntarily and
unknowingly participating in the campaign at the direction of a master
computer.
"The truth is the actual attack is not coming from those few individuals,"
said Peter Schlampp, a cyber security expert with Solera Networks.
"They're commanding an extremely broad network of.... computers being
controlled by whatever the puppetmaster wants them to do."
These secret networks, or botnets, are common, and are often amassed
through viruses and worms without a computer user even knowing it.
"The infected computers can be told remotely to go do something: Send out
spam, send out bad traffic. They can even be told to attack the Pentagon
and steal data. They're robots," said Alan Paller, director of research at
SANS Institution for Computer Security and Training.
Paller said there are millions of computers available to would-be cyber
attackers via botnets, making it difficult for law enforcement agencies to
root out the threat completely. But, he added, officials can often track
down individuals behind the botnet controls.
Dutch National Police arrested a 16-year-old boy Wednesday in connection
with the hack attacks, a spokesperson for the Dutch National Prosecutors
Office told ABC News. The teen, he said, had confessed to involvement in
the attacks on MasterCard and Visa's websites.
But the botnets will live on.
"Botnets wax and wane over time, but don't go away," said Schampp. "The
only way to kill a botnet is for all the PCs to have updated antivirus and
antimalware software or to shut down the computers."
In the current battle, Paller said, resolution may more likely come
through more cyberattacks -- from the other side.
"What will happen is that there are enough angry people on the side that
doesn't like what Wikileaks did that are going to be vigilantes too.
That's already started, he said. "They're attacking back."
ABC News' Zunaira Zaki contributed to this report.
--
Sean Noonan
Tactical Analyst
Office: +1 512-279-9479
Mobile: +1 512-758-5967
Strategic Forecasting, Inc.
www.stratfor.com